[java-idp-plugin-webauthn] branch main updated: Update default metadata service URL to MDSv3
Phil Smart
philip.smart at jisc.ac.uk
Fri Mar 15 11:27:40 UTC 2024
This is an automated email from the git hooks/post-receive script.
philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=561f3cef5b1c72d14e3cb6ad57acf1fe044d0f65
The following commit(s) were added to refs/heads/main by this push:
new 561f3ce Update default metadata service URL to MDSv3
561f3ce is described below
commit 561f3cef5b1c72d14e3cb6ad57acf1fe044d0f65
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Mar 15 11:27:38 2024 +0000
Update default metadata service URL to MDSv3
---
.../src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml | 2 +-
.../idp/plugin/authn/webauthn/conf/authn/webauthn.properties | 6 +++---
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index efaf5c1..5de6433 100644
--- a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -93,7 +93,7 @@
lazy-init="true"
p:trustRootFile="%{idp.authn.webauthn.metadata.trustRootFile:}"
p:cacheFile="%{idp.authn.webauthn.metadata.cacheFile:}"
- p:metadataBlobUrl="%{idp.authn.webauthn.metadata.metadataBlobUrl:https://mds.fidoalliance.org}"
+ p:metadataBlobUrl="%{idp.authn.webauthn.metadata.metadataBlobUrl:https://mds3.fidoalliance.org}"
p:metadataBlobFile="%{idp.authn.webauthn.metadata.metadataBlobFile:}"
p:expectedLegalHeaders="%{idp.authn.webauthn.metadata.expectedLegalHeaders:Retrieval and use of this BLOB indicates acceptance of the appropriate agreement located at https://fidoalliance.org/metadata/metadata-legal-terms/}"/>
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index 37ad201..ba1ec74 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -13,8 +13,8 @@ idp.authn.webauthn.relyingPartyName = Shibboleth
#idp.authn.webauthn.allowOriginSubdomain = false
# Allow credential registrations to be untrusted, the default. If false, this requires attestation statements from the
-# authenticator using the idp.authn.webauthn.registration.attestationConveyancePreference = DIRECT property
-# and FIDO metadata is loaded and itself trusted.
+# authenticator using 'idp.authn.webauthn.registration.attestationConveyancePreference = DIRECT' and FIDO metadata is
+# loaded and trusted.
#idp.authn.webauthn.allowUntrustedAttestation = true
# Generic flow properties to adjust behavior
@@ -48,7 +48,7 @@ idp.authn.webauthn.supportedPrincipals = \
## If you want to download the metadata from a URL when the IdP starts, you must specify a cache file (.bin) and the URL to fetch the metadata
#idp.authn.webauthn.metadata.cacheFile =
-#idp.authn.webauthn.metadata.metadataBlobUrl = https://mds.fidoalliance.org
+#idp.authn.webauthn.metadata.metadataBlobUrl = https://mds3.fidoalliance.org
## If you want to load the metadata from a file *only*, set the metadata blob file location. This will override the metadataBlobUrl property
#idp.authn.webauthn.metadata.metadataBlobFile =
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list